The vulnerability of the v4l2_m2m_querybuf function in the v4l2-mem2mem.c component of the Linux operating system allows a hacker to cause a service failure, increase their privileges, or execute arbitrary code.

The vulnerability of the v4l2m2mquerybuf function in the v4l2-mem2mem.c component of the Linux operating system is related to writing beyond the buffer limit due to incorrect input validation. Exploiting this vulnerability can allow an attacker to cause system failures, gain elevated privileges, ...

CVE-2020-5002 IBM Financial Transaction Manager security bypass

IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954...

CVE-2023-27292

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

Remote Code Execution (RCE)

apacheairflowprovidersgoogle is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper validation for th cloud sql provider parameter in the downloadsqlproxyifneeded function of cloudsql.py which allows an attacker to upload and execute malicious code on the system...

CVE-2023-27292

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

CVE-2023-27292

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

CVE-2023-27292

OpenCATS (OpenCATS) has an open redirect vulnerability (CVE-2023-27292) caused by improper validation of user-supplied GET parameters, with potential exposure to template injection and related data access/modification risks. The Nuclei template confirms the issue as an open redirect, describing i...

PTC ThingWorx Edge

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PTC Equipment: ThingWorx Edge Vulnerabilities: Improper Validation of Array Index, Integer Overflow or Wraparound 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

CVE-2023-0755

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code...

CVE-2023-0755

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code...

K15580: Apache CXF and JBoss vulnerabilities

Security Advisory Description CVE-2010-2076 Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows...

K54635192: Linux kernel overlayfs vulnerability CVE-2021-3493

Security Advisory Description The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the...

Input validation

Improper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack would allow them to intercept...

CVE-2022-48306

The CVE-2022-48306 vulnerability affects Palantir Gotham Chat IRC helper prior to version 30221005.210011.9242, due to improper validation of TLS hostnames. This hostname validation flaw enables a malicious actor with network access to perform a man-in-the-middle attack, potentially intercepting,...

SUSE CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

SUSE CVE-2022-38900

decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS...

Security Bulletin: IBM QRadar SIEM includes multiple components with known vulnerabilities

Summary The product includes multiple vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-31160 DESCRIPTION: jQuery UI is vulnerable to cross-site...

(Pwn2Own) Western Digital MyCloud PR4100 FTP Server Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Western Digital MyCloud PR4100 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FTP server. The issue results from the lack of...

CVE-2022-34350 IBM API Connect security bypass

IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to...

Privilege Escalation

froxlor/froxlor is vulnerable to Privilege Escalation. The vulnerability exists due to improper validation of user uploaded files, which allows an attacker to inject and execute malicious code into the system, resulting in privilege escalation...